# Cards

Endpoints for card management.

## List cards

 - [GET /v2/cards](https://developer.brex.com/openapi/team_api/cards/listcardsbyuserid.md): Lists all cards by a user_id.
Only cards with limit_type = CARD have spend_controls

## Create card

 - [POST /v2/cards](https://developer.brex.com/openapi/team_api/cards/createcard.md): Creates a new card.
The spend_controls field is required when limit_type = CARD.
The mailing_address field is required for physical cards and is the shipping address used to send the card; it is not the same as the billing and mailing address used for online purchases.
The first 2 lines of this address must be under 60 characters long. Each user can only have up to 10 active physical cards.
For Empower accounts, this endpoint requires budget management. If your account does not have access to budget management features, a 403 response status will be returned. 
If this is the case and you want to gain access to this endpoint, please contact Brex support.

## Get card

 - [GET /v2/cards/{id}](https://developer.brex.com/openapi/team_api/cards/getcardbyid.md): Retrieves a card by ID. Only cards with limit_type = CARD have spend_controls

## Update card

 - [PUT /v2/cards/{id}](https://developer.brex.com/openapi/team_api/cards/updatecard.md): Update an existing vendor card

## Lock card

 - [POST /v2/cards/{id}/lock](https://developer.brex.com/openapi/team_api/cards/lockcard.md): Locks an existing, unlocked card. And the card owner will receive a notification about it.

## Get card number

 - [GET /v2/cards/{id}/pan](https://developer.brex.com/openapi/team_api/cards/getcardnumber.md): Retrieves card number, CVV, and expiration date of a card by ID.

## Create secure email to send card number

 - [POST /v2/cards/{id}/secure_email](https://developer.brex.com/openapi/team_api/cards/emailcardnumber.md): Creates a secure email to send card number, CVV, and expiration date of a card by ID to the specified email.

This endpoint is currently gated. If you would like to request access, please reach out to
developer-support@brex.com

## Terminate card

 - [POST /v2/cards/{id}/terminate](https://developer.brex.com/openapi/team_api/cards/terminatecard.md): Terminates an existing card. The card owner will receive a notification about it.

## Unlock card

 - [POST /v2/cards/{id}/unlock](https://developer.brex.com/openapi/team_api/cards/unlockcard.md): Unlocks an existing card.